Phising

Phishing is an act of attempt to acquire information such as usernames,passwords, and credit card details,etc of a person or organization illegaly in an electronic communication using social engineering and technical subterfuge.

Phishing is committed so that the criminal may obtain sensitive and valuable information about a consumer, usually with the goal of fraud to obtain the customer bank and other financial information.

It tries to trick users with official-looking messages◦ Credit card ◦ Bank account◦ eBay◦ Paypal

Phishing are typically carried out by e-mail spoofing or instant messaging.

Some phishing e-mails also contain malicious or unwanted software that can track your activities or slow your computer

The purpose of a phishing message is to acquire sensitive information about a user. For doing so the message needs to deceive the intended recipient. ◦ So it doesn’t contains any useful information and hence

falls under the category of spam.

A spam message tries to sell a product or service, whereas phishing message needs to look like it is from a legitimate organization.

Techniques applied to spam message cant be applied naively to phishing messages.

Dear Valued Member,

According to our terms of services, you will have to confirm your e-mail by the following link, or your account will be suspended for security reasons.

http://www.uc.edu/[email protected]

After following the instructions in the sheet, your account will not be interrupted and will continue as normal.

Thanks for your attention to this request. We apologize for any inconvenience.

Sincerely, Uc Abuse Department

http://www.nbmd.cn/Confirmation_Sheet.pif

DON’T CLICK THE LINK◦ Type the site name in your browser (such as

www.paypal.com)

Never send sensitive account information by e-mail◦ Account numbers, SSN, passwords

Never give any password out to anyone

Verify any person who contacts you (phone or email). ◦ If someone calls you on a sensitive topic, thank

them, hang up and call them back using a number that you know is correct, like from your credit card or statement.